$ rpki-client -vvf rpki.apnic.net/member_repository/A918E8EB/D039F8D6D1BF11E8B264F65AC4F9AE02/BHuLKVTEerFcV1ht0ATriTl3xa8.mft File: BHuLKVTEerFcV1ht0ATriTl3xa8.mft (raw, json) Hash identifier: flRqY6uMGXpJ5qq34WflvUhGRkFbkxHOKa3iVNOR4oA= Subject key identifier: 50:FE:BE:FE:D6:07:F7:83:8C:21:B3:99:0F:DF:43:46:3A:4C:FC:D3 Authority key identifier: 04:7B:8B:29:54:C4:7A:B1:5C:57:58:6D:D0:04:EB:89:39:77:C5:AF Certificate issuer: /CN=A918E8EB/serialNumber=047B8B2954C47AB15C57586DD004EB893977C5AF Certificate serial: 1213 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BHuLKVTEerFcV1ht0ATriTl3xa8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918E8EB/D039F8D6D1BF11E8B264F65AC4F9AE02/BHuLKVTEerFcV1ht0ATriTl3xa8.mft Manifest number: 1201 Signing time: Fri 22 Nov 2024 17:09:06 +0000 Manifest this update: Fri 22 Nov 2024 17:09:06 +0000 Manifest next update: Fri 29 Nov 2024 17:09:06 +0000 Files and hashes: 1: BHuLKVTEerFcV1ht0ATriTl3xa8.crl (hash: 8tyzUGr92+kX/RDOl5KLoE58DigS6NBKZoodbCqfDIg=) 2: 3489528EC84511ED90A61540C4F9AE02.roa (hash: 0GBU9clR4v/kv/m8Iw+tpC8pBR8oX1ZqIKf4DgtvCco=) 3: 35615A30C84511ED90A61540C4F9AE02.roa (hash: CfO3CZyouhq3VXYxiVm5tnc8saneiKp2zLb93JcMMQ0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918E8EB/D039F8D6D1BF11E8B264F65AC4F9AE02/BHuLKVTEerFcV1ht0ATriTl3xa8.crl rsync://rpki.apnic.net/member_repository/A918E8EB/D039F8D6D1BF11E8B264F65AC4F9AE02/BHuLKVTEerFcV1ht0ATriTl3xa8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BHuLKVTEerFcV1ht0ATriTl3xa8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 16:30:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4627 (0x1213) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918E8EB/serialNumber=047B8B2954C47AB15C57586DD004EB893977C5AF Validity Not Before: Nov 22 17:09:06 2024 GMT Not After : Nov 29 17:09:06 2024 GMT Subject: CN=6740bab2-e3b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:82:9d:11:db:24:8e:8d:5a:88:31:f3:60:1b: a5:27:d4:52:96:2c:0d:d7:3a:71:1c:8c:6a:b6:2b: 23:5a:f4:9a:9b:2e:1a:d3:76:9f:18:22:a3:bd:c9: 54:dc:7c:cc:e2:ab:a4:28:d5:35:e2:0b:b2:97:c9: 3f:6d:9f:f8:45:f6:68:c7:c0:26:42:2a:5e:54:12: 4c:a8:ed:e1:20:39:bf:92:c2:c8:8a:8f:25:dd:b9: 2c:bd:5a:d0:c1:79:7a:8d:f4:38:e0:f6:6f:1d:08: 6b:15:bb:95:a7:24:4e:07:50:5b:ad:79:7e:bf:20: 1e:90:c4:3e:ee:7e:50:51:35:85:40:b4:bf:c4:a2: f7:64:42:2d:a1:58:59:79:ce:40:b0:89:4f:da:fc: ce:0d:1d:c2:52:34:22:dc:86:9f:d7:a8:4c:3a:bb: 8d:5f:57:81:28:8e:9b:cc:d5:a1:5b:76:30:f5:0c: 52:de:2f:9b:00:0e:6f:62:36:ce:ed:d2:3e:27:49: 74:ad:87:f1:69:92:b1:a0:8b:4a:83:f0:e2:3f:43: 91:e9:d6:9a:eb:11:89:98:a1:eb:c1:bc:e5:44:d9: 92:8a:21:b8:8b:e6:41:82:fa:1f:d3:a1:67:99:42: 13:ae:95:5b:b5:98:c7:91:7e:0b:38:5d:6c:e3:e0: 98:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:FE:BE:FE:D6:07:F7:83:8C:21:B3:99:0F:DF:43:46:3A:4C:FC:D3 X509v3 Authority Key Identifier: keyid:04:7B:8B:29:54:C4:7A:B1:5C:57:58:6D:D0:04:EB:89:39:77:C5:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918E8EB/D039F8D6D1BF11E8B264F65AC4F9AE02/BHuLKVTEerFcV1ht0ATriTl3xa8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BHuLKVTEerFcV1ht0ATriTl3xa8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E8EB/D039F8D6D1BF11E8B264F65AC4F9AE02/BHuLKVTEerFcV1ht0ATriTl3xa8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 45:e2:34:03:64:51:dd:6e:b3:48:c6:10:bf:24:6f:0d:29:3d: a8:ae:d7:ea:36:3f:43:d9:7a:b8:05:28:bd:d2:ea:1d:c3:8e: c4:c1:64:6b:b2:d2:37:b1:3d:83:7c:92:e3:3e:fc:9d:c8:1f: eb:f1:03:15:29:00:ee:cd:5f:65:c3:a0:6a:3f:75:ba:44:58: 3c:37:4b:13:43:e2:dd:ba:75:e1:34:f2:64:83:7c:b2:df:27: f2:23:47:58:9c:33:3c:2a:e9:33:2d:b0:54:80:27:49:c1:70: c7:f6:91:34:d1:b3:34:e3:46:bc:f3:82:8b:ab:68:bd:df:55: cc:25:da:a8:83:45:8e:c3:5c:15:a1:96:de:c1:17:94:fa:89: 03:4b:c6:70:97:70:4f:04:97:3d:85:ec:b7:5e:37:95:ba:f4: 8b:50:3d:c3:ff:ae:f6:ad:57:e0:2a:14:bb:5f:b5:ce:33:e2: 4f:41:d0:8f:2d:13:fa:34:ad:8a:f2:b0:cc:85:54:4e:c1:84: 5e:7d:c9:25:cc:77:f8:cf:4e:e1:36:54:fd:db:9d:db:cd:5e: ea:00:1f:2c:57:84:ed:cc:05:7e:38:9e:d7:b7:92:3d:ce:6a: b5:d5:53:00:d2:ae:fd:22:d2:7f:98:16:61:3b:bb:79:f3:20: 52:80:1c:5d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEhMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEU4RUIxMTAvBgNVBAUTKDA0N0I4QjI5NTRDNDdBQjE1QzU3NTg2REQwMDRFQjg5 Mzk3N0M1QUYwHhcNMjQxMTIyMTcwOTA2WhcNMjQxMTI5MTcwOTA2WjAYMRYwFAYD VQQDEw02NzQwYmFiMi1lM2IxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2YKdEdskjo1aiDHzYBulJ9RSliwN1zpxHIxqtisjWvSamy4a03afGCKjvclU 3HzM4qukKNU14guyl8k/bZ/4RfZox8AmQipeVBJMqO3hIDm/ksLIio8l3bksvVrQ wXl6jfQ44PZvHQhrFbuVpyROB1BbrXl+vyAekMQ+7n5QUTWFQLS/xKL3ZEItoVhZ ec5AsIlP2vzODR3CUjQi3Iaf16hMOruNX1eBKI6bzNWhW3Yw9QxS3i+bAA5vYjbO 7dI+J0l0rYfxaZKxoItKg/DiP0OR6daa6xGJmKHrwbzlRNmSiiG4i+ZBgvof06Fn mUITrpVbtZjHkX4LOF1s4+CYgQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFD+vv7W B/eDjCGzmQ/fQ0Y6TPzTMB8GA1UdIwQYMBaAFAR7iylUxHqxXFdYbdAE64k5d8Wv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RThFQi9EMDM5RjhENkQx QkYxMUU4QjI2NEY2NUFDNEY5QUUwMi9CSHVMS1ZURWVyRmNWMWh0MEFUcmlUbDN4 YTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0JIdUxLVlRFZXJGY1YxaHQwQVRyaVRsM3hhOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RThFQi9EMDM5RjhENkQxQkYxMUU4QjI2NEY2NUFDNEY5QUUwMi9CSHVMS1ZURWVy RmNWMWh0MEFUcmlUbDN4YTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBF4jQDZFHdbrNIxhC/JG8NKT2ortfqNj9D2Xq4BSi90uodw47EwWRr stI3sT2DfJLjPvydyB/r8QMVKQDuzV9lw6BqP3W6RFg8N0sTQ+LdunXhNPJkg3yy 3yfyI0dYnDM8KukzLbBUgCdJwXDH9pE00bM040a884KLq2i931XMJdqog0WOw1wV oZbewReU+okDS8Zwl3BPBJc9hey3XjeVuvSLUD3D/672rVfgKhS7X7XOM+JPQdCP LRP6NK2K8rDMhVROwYRefcklzHf4z07hNlT9253bzV7qAB8sV4TtzAV+OJ7Xt5I9 zmq11VMA0q79ItJ/mBZhO7t58yBSgBxd -----END CERTIFICATE-----Generated at Fri Nov 22 17:55:51 2024 by rpki-client on console-fra.rpki-client.org